TA14-069A: Microsoft Ending Support for Windows XP and Office 2003

["US-CERT" <US-CERT () ncas us-cert gov>]

NCCIC / US-CERT

National Cyber Awareness System:

TA14-069A: Microsoft Ending Support for Windows XP and Office 2003 [ https://www.us-cert.gov/ncas/alerts/TA14-069A-0 ] 
03/10/2014 10:56 AM EDT 
Original release date: March 10, 2014

Systems Affected

  * Microsoft Windows XP with Service Pack 3 (SP3) Operating System 
  * Microsoft Office 2003 Products 

Overview

Microsoft is ending support for the Windows XP operating system and Office 2003 product line on April 8, 2014. [1] 
After this date, these products will no longer receive:


  * Security patches which help protect PCs from harmful viruses, spyware, and other malicious software 
  * Assisted technical support from Microsoft 
  * Software and content updates 

Description

All software products have a lifecycle. End of support refers to the date when Microsoft no longer provides automatic 
fixes, updates, or online technical assistance. [2] As of February 2014, nearly 30 percent of Internet-connected PCs 
still run Windows XP. [3]

Microsoft will send “End of Support” notifications to users of Windows XP who have elected to receive updates via 
Windows Update. Users in organizations using Windows Server Update Services (WSUS), System Center Configuration 
manager, or Windows Intune will not receive the notification. [4]

Impact

Computer systems running unsupported software are exposed to an elevated risk to cybersecurity dangers, such as 
malicious attacks or electronic data loss.

Users may also encounter problems with software and hardware compatibility since new software applications and hardware 
devices may not be built for Windows XP or Office 2003.

Organizations that are governed by regulatory obligations may find they are no longer able to satisfy compliance 
requirements. [4]

Solution

Computers operating Windows XP with SP3 or running Office 2003 products will continue to work after support ends. 
However, using unsupported software may increase the risk of viruses and other security threats.

Users have the option to upgrade to a currently supported operating system or office productivity suite. The Microsoft 
“End of Support” pages for Windows XP [ http://www.microsoft.com/en-us/windows/enterprise/endofsupport.aspx ] and 
Office 2003 [ http://office.microsoft.com/en-us/help/support-is-ending-for-office-2003-HA103306332.aspx ] offer 
additional details.

There are software vendors and service providers in the marketplace who offer assistance in migrating from Windows XP 
or Office 2003 to a currently supported operating system or office productivity suite. US-CERT does not endorse or 
support any particular product or vendor.

Users who choose to continue using Windows XP after the end of support may mitigate some risks by using a web browser 
other than Internet Explorer. The Windows XP versions of some alternative browsers will continue to recieve support 
temporarily. Users should consult the support pages of their chosen alternative browser for more details.

References

  * [1] Support is ending for Office 2003  [ 
http://office.microsoft.com/en-us/help/support-is-ending-for-office-2003-HA103306332.aspx ] 
  * [2] Windows lifecycle fact sheet  [ http://windows.microsoft.com/en-us/windows/lifecycle ] 
  * [3] Operating system market share [ 
http://netmarketshare.com/operating-system-market-share.aspx?qprid=10&qpcustomd=0&qpsp=181&qpnp=1&qptimeframe=M ] 
  * [4] Support for Windows XP is ending [ http://www.microsoft.com/en-us/windows/enterprise/endofsupport.aspx ] 

Revision History

  * March 10, 2014 - Initial Release 
________________________________________________________________________

This product is provided subject to this Notification [ http://www.us-cert.gov/privacy/notification ] and this Privacy 
& Use [ http://www.us-cert.gov/privacy/ ] policy.

________________________________________________________________________

OTHER RESOURCES: Contact Us [ http://www.us-cert.gov/contact-us/ ] | Security Publications [ 
http://www.us-cert.gov/security-publications ] | Alerts and Tips [ http://www.us-cert.gov/ncas ] | Related Resources [ 
http://www.us-cert.gov/related-resources ] 

STAY CONNECTED: Sign up for email updates [ http://public.govdelivery.com/accounts/USDHSUSCERT/subscriber/new ]